OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
8 views

Allow LDAP Authentication (or connection)

I'm trying to make a webapp that authenticate throw a LDAP Server. But i get this error: ldap_bind(): Unable to bind to server: Can't contact LDAP server And when i try this command: ldapwhoami ...
-1
votes
0answers
7 views

Openldap enable sudoers in centos 6.6

Can someone please suggest me how to enable sudo for ldap user I have tied adding the following schema in /etc/openldap/slapd.d/cn=config/cn=schema , but ldap server is not starting dn: cn=schema ...
0
votes
0answers
9 views

Openldap ActiveDirectory Proxy using Slapd.d

I am currently attempting to setup an OpenLDAP proxy that will proxy proxy between 2 Active Director Domains, and will be used to talk to work with Shibboleth IDP3. I've never worked with openLDAP ...
0
votes
0answers
12 views

Allow or disallow some users login in Dovecot based in their network

I have a server running dovecot with IMAP and LDAP authentification. All works as expected, however I would want to let some users to access the mail server from outside and other to access from the ...
0
votes
2answers
9 views

openldap TLS error -8179:Peer's Certificate issuer is not recognized

tl;dr Does this error mean that I need to find my company's ldap server's public certificate and install it, or that my company's ldap server needs to install my public cert? If the former, how can I ...
1
vote
0answers
12 views

Ldap on Centos7: why my RootDN doesn't work?

On a fresh centos7 ldap server I use a ldif like this replace: olcRootDN olcRootDN: dc=Manager,dc=mydomo,dc=mydom - replace: olcAccess olcAccess: {0}to * by ...
0
votes
1answer
26 views

Modifying OpenLDAP Schema - Adding 'host' attribute to 'person' objectclass

We have a legacy custom webapp that authenticates users against an OpenLDAP server. We are trying to set up another, separate OpenLDAP server to replace the older one, but we need to make the new ...
0
votes
0answers
15 views

How to set initial user password in openldap?

I am new in setting up LDAP server. I have configured Openldap server and able to add test users from LDIF file. The LDIF file has username and password for each user. Now for the real part, I have ...
0
votes
1answer
23 views

how to configure proper credentials in OpenLDAP

I don't understand how to configure users and passwords on the OpenLDAP server. What I describe in this question is based on a clean install of OpenLDAP 2.4 on Centos 7 (via yum). After starting ...
0
votes
1answer
15 views

OpenLDAP/SSSD Automatically Add User to Local Group

I've got a host of servers running various flavors of Linux all setup as OpenLDAP clients via SSSD. I added an LDAP group (sysadmins). I also added a sysadmins group on all of my servers. The members ...
1
vote
1answer
25 views

Add several new entries to LDAP fails

I can't add more than one record to LDAP. I have blank line before a new DN entry but it seems it doesn't work for some season. ldapadd -x -D cn=Manager,dc=hadoop,dc=local -w -f ldap.ldif ...
0
votes
1answer
31 views

Install openLDAP server on pfsense

I have a pfsense router with 25 clients ( linux and windows ). I want to filter the internet traffic for some of the clients using squid guard. I have researched the options and I would like to use ...
0
votes
1answer
15 views

ldap-overlay with fixed default attributes

i'm having a largish user-base (>>1000) which should be able to collectively use some sharing service. the user base is slowly but constantly changing. esp. we are not interested in privilege ...
0
votes
2answers
26 views

pam_groupdn doesn't work at all. always all users allowed to log in

i have tried to install pam, ldap on fedora23. i have configured pam.d/system-auth as follows: #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time ...
1
vote
0answers
32 views

How to search based on custom attribute?

I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
0
votes
1answer
27 views

OpenLDAP Filtering Users that are part of Groups of Groups

LDAP Configuration: MemberOf Overlay is enabled Users are part of an organizationalUnit called People. Each user is a "memberOf" a role. For example, a user in their role at a company is a ...
0
votes
1answer
23 views

Enable anonymous bind in openldap

I have setup ldap server successfully on centos 7, It works fine. However, i cannot access the server with 'anonymous' bind, which according to every google search it should be. When I execute; ...
0
votes
1answer
24 views

ldapmodify error - Server is unwilling to perform (53) additional info: no global superior knowledge

Ok guys, I've been beating my head against the wall over this one all day, and I'm getting nowhere. I'm trying to run ldapmodify against OpenLDAP in a script to update a couple of attributes for a ...
4
votes
2answers
75 views

AWS Simple AD: “KDC has no support for encryption type” for users created with adtool, but not with MS Management Console

Background I am trying to log in (via SSH, to an Amazon Linux EC2 instance running sssd) as users that I've created in my AWS Directory Services Simple AD. I am authenticating with kerberos and ...
1
vote
0answers
18 views

LDAP ACL for restricting applications with same user dn

Currently we need to configure Group based LDAP login for our custom applications. We have applications named app1, app2 etc. For restricting users to login for a particular application for eg app1 ...
0
votes
0answers
23 views

OpenLDAP proxy gone for good

I recently had to troubleshoot a Windows AD issue. Users suddenly lost access to shared folders and network drives. After some research I discovered that there was a Linux CentOS machine that crashed ...
0
votes
0answers
69 views

Freeradius/Openldap/802.1X: PEAP-MSCHAPv2 XOR certificates

For WPA2 Enterprise I would like to have user authentication which is supported out-of-the-box by as many clients as possible (i.e., PEAP-MSCHAPv2). Furthermore, for laptops, workstations etc. I ...
3
votes
1answer
52 views

Rabbitmq Won't Talk to Active Directory

I have a rabbitmq server that I need to hook up to AD. Configuration is set using puppet rabbitmq module, with some minor manual changes (log level): % This file managed by Puppet % Template Path: ...
5
votes
3answers
156 views

How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?

I'm setting up OpenLDAP slapd on Ubuntu 14.04 Trusty Tahr. I want certain instances (replication etc.) that aren't users to be able to login via SASL using DIGEST-MD5 mechanism. Unlike users, they ...
1
vote
1answer
41 views

OpenLDAP - How to restrict Debian login to specific groups (posixGroup)?

I'm trying to restrict login to specific LDAP groups in Debian 8. The system is configured to use OpenLDAP (PAM) as authentication method. My goal is to configure the system to allow all local users ...
1
vote
1answer
43 views

Can't access cn=config through Apache Directory Studio GUI

I am quite familiar with openldap. The dynamic configuration is quite new to me. So I wanted to make life easier and change openldap configuration through Apache Directory Studio GUI. Openldap is ...
1
vote
1answer
44 views

sss_cache keeps looking for a LOCAL domain, not purging LDAP records

I've added a user to a group in LDAP. The user shows up in ldapsearch. However, the user does not show up when I list group members on my RHEL instance using getent group my_group. Am I correct in ...
0
votes
0answers
18 views

Why isn't pwdReset automatically set when pwdMustChange is true?

Every other directory server, i.e. Oracle's will automatically set pwdReset to TRUE if pwdMustChange is defined in the policy: When a user's password is changed by another user, such as a password ...
0
votes
0answers
12 views

LDAP dynlist not working with syncrepl replication

I'm using syncrepl replication with one master and many slaves. I'm also using dynlist overlay. Dynlist works on the master, but not on slaves. When I run a query on master, everything works ...
0
votes
1answer
13 views

AD LDS data refreshing from script

I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account. I cannot enable syncrepl ont ...
1
vote
1answer
37 views

ldap ssl v2 v3 can't read server hallo A

I need to connect ApacheDS database using startTLS with OpenLDAP client. My ldaprc file contains: URI ldap://127.0.0.1:7323 ldaps://127.0.0.1:7423 SSL start_tls SASL_MECH plain TLSCipherSuite ...
0
votes
1answer
47 views

CentOS 7 autofs wildcard mount not working

I've got a couple of CentOS 7 client machines authenticating against OpenLDAP right now. The next step is to get autofs working. Which I have, but my map loads all users at once. I'd like to avoid ...
1
vote
1answer
38 views

Export LDAP schema without data

For testing purposes, I need a copy of our LDAP server without any personal data. What is the best way, to export this from an existing OpenLDAP server? I tried ldapsearch and Apache Directory ...
3
votes
3answers
49 views

Kerberos with OpenLDAP backend: Password Sync HowTo

The basic setup is an OpenLDAP server. The users are provisioned and the passwords are set. Now we decided to add an MIT KDC for being able to use Kerberos. We configured the MIT KDC to utilize the ...
1
vote
2answers
63 views

Support users in openldap catalog with samba specific attributes

2016 is coming. We still use openldap. I have openldap server from ubuntu 12.04 with existing users. It provides the authentication layer in addition to containing the user, group, and machine ...
1
vote
1answer
57 views

Why openldap password policy pwdMinLength doesn't work on Ubuntu 14.04?

I have defined openldap password policy overlay The pwdMinLength: 9 is not working, i'm still able to create user with password less < 9 character, The password Password Policy Overlay on OpenLDAP ...
7
votes
2answers
155 views

SSSD rejects LDAP login with su: incorrect password

I've set up an LDAP server with user accounts. I've successfully configured a Rails application to authenticate against this LDAP server. I'm now trying to configure SSSD to authenticate against LDAP, ...
0
votes
1answer
27 views

OpenLDAP extend ACL properly

I have a fresh installed server with this in it: How should I extend the ACL to give a specific user write access a description property under a specific subtree of items? More specificly I want to ...
0
votes
1answer
33 views

Linux LDAP to Ldapadmin configuration issues

I'm learning how to setup and use OpenLDAP installed on an Ubuntu server. I executed sudo apt-get install slapd ldap-utils -y and set my ldap domain to test.mydomain.com. I can execute ldapadd ...
0
votes
0answers
24 views

LDAP Self-Service Interface for Profile-Management

I am searching for a Self-Service webinterface for my LDAP Users, I Airways have LAm installier for creating everything but my Users want to update their Passwords, Displaynames and Profilepictures on ...
0
votes
0answers
17 views

OpenLdap allop overlay olc

Is there any way to configure operational attributes to be shown for every request? (openldap 2.4) There is the allop overlay, but it seems to be not working with olc only with slapd.conf. I'm able ...
0
votes
1answer
65 views

ldap_modify: Insufficient access (50) for cn=config as -H ldapi:/// -Y EXTERNAL

I'm setting up a second LDAP server. I've converted a slapd.conf to a slapd.d database using slaptest. I'm trying to apply this LDIF: # cat loglevel.ldif dn: cn=config changetype:modify replace: ...
0
votes
1answer
31 views

i cant canfigure pgina for ldap login

hi this is mi ldap user tree: dc=intranet,dc=internet,dc=com cn=admin cn=user1 cn=bna ou=buo cn=user2 I want to log with anyone user in the tree and assign ...
1
vote
1answer
86 views

How to install a trusted certificate on client machine to enable LDAP authentication?

I downloaded a TurnKey Linux OpenLDAP vm instance. It now runs in a vm. I am using this for user account authentication over a network. The client machine is a stock CentOS 7 machine. Everything on ...
0
votes
1answer
16 views

OpenLDAP ACL stored as hash?

Does anyone know why when I add these 3 ACLs the third is represented in the olcDatabase\={2}hdb.ldif as a random string? ACLs: olcAccess: {0}to attrs=userPassword,shadowLastChange by ...
4
votes
2answers
94 views

OpenLDAP proxy cache not retrieving entries

I need to set up a local LDAP proxy cache which connects to our central Active Directory server. OpenLDAP Proxy Cache looks just like the thing. But following the manpages as closely as possible, I am ...
2
votes
0answers
23 views

OpenLDAP: partial syncrepl-ed cn=config

I would like to be able to syncrepl only a subtree of cn=config, namely cn=schema,cn=config: # {0}config, config dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: ...
1
vote
1answer
61 views

OpenLDAP configure LDAPS, restart fails

I am attempting to get ldaps working with openldap. I have a wildcard ssl certificate that was issued for this domain and have used ldapmodify to add the relevant files to cn=config as show here. ...
1
vote
1answer
188 views

ldap_add: Other (e.g., implementation specific) error (80) when adding pw-sha2.la module

I'm getting this error when trying to add a module to OpenLDAP: # ldapadd -H ldapi:/// -Y EXTERNAL -D 'cn=config' -f ./module.ldif SASL/EXTERNAL authentication started SASL username: ...
2
votes
1answer
71 views

Passwords not working after migration from /etc/shadow to LDAP

I've migrated RHEL6 user accounts from traditional /etc/passwd, /etc/shadow, and /etc/group files to OpenLDAP. However, trying to log in as the migrated users does not work because of incorrect user ...